OpenBMB vulnerabilities
We track 10 vulnerabilities in OpenBMB products across 4 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest OpenBMB vulnerabilities
- 7.3 High severity
Internet of Agents: Improper Authentication
A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The impacted element is the function register of the file im_server/app.py of the component Agent Registry. Such manipulation of the argume
- 7.3 High severity
Internet of Agents: Incorrect Privilege Assignment
A vulnerability was found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This issue affects the function fetch_chat_record of the file im_server/app.py of the component Message Handler. The manipulation of the argument comm_id re
- 7.3 High severity
A vulnerability was detected in OpenBMB Internet of Agents up to…
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function _primary_field_query of the file common/utils/milvus_utils.py of the component Agent Registry. The manipulation of the argument
- 8.3 High severity
Internet of Agents: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function execute_code of the file im_client/agents/tools/code_executor.py of the component Code Executor Tool. This manipulation of the argumen
- 7.3 High severity
Internet of Agents: Improper Authentication
A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function ConnectionManager.connect of the file im_server/app.py of the component WebSocket Connection Manager. The manipulation o
- 8.1 High severity
StaffDeck: Use of Hard-coded Cryptographic Key
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin'
- 7.5 High severity
XAgent: Improper Limitation of a Pathname to a Restricted Directory
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containm
- 9.1 Critical severity
ChatDev: Improper Limitation of a Pathname to a Restricted Directory
OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename in the file upload endpoint. Attackers c
- 7.5 High severity
XAgent: Improper Authentication
A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file XAgentServer/application/websockets/share.py of the component ShareServer WebSocket Endpoint. Performing a manipulation of the argument interaction_id results i
- 8.8 High severity
A vulnerability was found in OpenBMB XAgent 1.0.0.
A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approached locally